It happens on glassfish, too, not only on tomcat, and I would love to see a fix or workaround myself.
-- View this message in context: http://shiro-user.582556.n2.nabble.com/Removing-JSESSIONID-xxx-from-the-url-after-login-tp7579370p7579379.html Sent from the Shiro User mailing list archive at Nabble.com.
